Skip to content

Improper Preservation of Permissions in github.com/cloudflare/cfrpki/cmd/octorpki

Moderate severity GitHub Reviewed Published Nov 18, 2021 in cloudflare/cfrpki • Updated Oct 2, 2023

Package

gomod github.com/cloudflare/cfrpki (Go)

Affected versions

< 1.4.2

Patched versions

1.4.2

Description

Impact

When copying files with rsync, octorpki uses the "-a" flag 0, which forces rsync to copy binaries with the suid bit set as root. Since the provided service definition defaults to root (https://github.com/cloudflare/cfrpki/blob/master/package/octorpki.service) this could allow for a vector, when combined with another vulnerability that causes octorpki to process a malicious TAL file, for a local privilege escalation.

For more information

If you have any questions or comments about this advisory email us at [email protected]

References

@dhaynespls dhaynespls published to cloudflare/cfrpki Nov 18, 2021
Reviewed Nov 19, 2021
Published to the GitHub Advisory Database Nov 19, 2021
Last updated Oct 2, 2023

Severity

Moderate

Weaknesses

CVE ID

CVE-2021-3978

GHSA ID

GHSA-3pqh-p72c-fj85

Source code

Credits

Loading Checking history
See something to contribute? Suggest improvements for this vulnerability.